High · published March 5, 2022
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
| Product | Versions | Fixed in |
|---|---|---|
| python/python | ≥ 3.6.0, < 3.6.14 | 3.6.14 |
| python/python | ≥ 3.7.0, < 3.7.11 | 3.7.11 |
| python/python | ≥ 3.8.0, < 3.8.11 | 3.8.11 |
| python/python | ≥ 3.9.0, < 3.9.6 | 3.9.6 |
| redhat/codeready_linux_builder | all versions | — |
| redhat/codeready_linux_builder_for_ibm_z_systems | all versions | — |
| redhat/codeready_linux_builder_for_power_little_endian | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems | all versions | — |
| redhat/enterprise_linux_for_power_little_endian | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| netapp/netapp_xcp_smb | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/xcp_nfs | all versions | — |
| netapp/hci | all versions | — |
| netapp/management_services_for_element_software | all versions | — |
| oracle/communications_cloud_native_core_binding_support_function | all versions | — |
| oracle/communications_cloud_native_core_network_exposure_function | all versions | — |
| oracle/communications_cloud_native_core_policy | all versions | — |